Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/323830343a6261633a3a2f33322d3438203d3e20323632333137.roa
File: 323830343a6261633a3a2f33322d3438203d3e20323632333137.roa (raw, json)
Hash identifier: 54CR7oqtkz74NGWR0W3sDkDcFhBFZiTcoTdwwPQkgnc=
Subject key identifier: 33:49:EE:7E:DE:0A:38:1B:97:23:D6:E4:3F:C3:DC:F5:0F:30:B4:BE
Certificate issuer: /CN=AA75E9D7C14B8290B067D83EABF023C9B420FB66
Certificate serial: 1B7D7110F22F806334E3E6C06D5DAB1272FD4E90
Authority key identifier: AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/323830343a6261633a3a2f33322d3438203d3e20323632333137.roa
Signing time: Thu 06 Mar 2025 07:42:47 +0000
ROA not before: Thu 06 Mar 2025 07:37:47 +0000
ROA not after: Thu 05 Mar 2026 07:42:47 +0000
asID: 262317
IP address blocks: 2804:bac::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7d:71:10:f2:2f:80:63:34:e3:e6:c0:6d:5d:ab:12:72:fd:4e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA75E9D7C14B8290B067D83EABF023C9B420FB66
Validity
Not Before: Mar 6 07:37:47 2025 GMT
Not After : Mar 5 07:42:47 2026 GMT
Subject: CN=3349EE7EDE0A381B9723D6E43FC3DCF50F30B4BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:a4:60:f3:52:70:a1:dc:0c:d8:f0:67:b3:
d1:24:47:d2:61:fc:9b:56:7f:b7:66:6e:52:b0:30:
a7:70:40:a4:ba:f4:1b:93:83:91:1d:08:3a:70:66:
49:11:7e:64:01:4e:a9:cf:b7:31:a6:42:17:48:3f:
cb:ff:56:54:f1:49:59:4d:7b:1f:d7:16:0c:3c:5d:
9d:6a:4c:65:bc:69:7f:1e:d3:52:b3:3a:ee:65:66:
a1:83:a1:92:be:a8:8c:e2:3c:ac:c4:09:44:9a:6d:
74:26:99:d0:d2:5b:b3:f4:be:33:1d:11:c7:3a:63:
fa:78:6a:c8:56:a8:79:57:41:ae:f6:66:bd:88:9d:
7c:84:5e:1b:8a:51:92:8f:c3:59:ae:29:f0:a5:7a:
84:76:84:b8:b2:31:d1:c0:88:f2:a2:88:5e:ba:46:
79:d6:da:f5:cf:9d:58:c8:9b:0a:dd:d3:33:5e:6e:
07:cb:46:bc:19:49:81:fd:5c:5c:59:b8:12:95:a9:
96:f4:25:c5:7a:dc:dd:5f:c0:35:cf:dc:b2:5a:5f:
47:16:77:be:19:5d:d5:cd:46:aa:51:28:87:cf:1d:
df:41:a6:b4:e5:ee:40:2f:70:1c:b6:50:33:e9:7c:
5f:67:a9:32:91:26:e6:13:8d:95:5a:93:17:03:fe:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:49:EE:7E:DE:0A:38:1B:97:23:D6:E4:3F:C3:DC:F5:0F:30:B4:BE
X509v3 Authority Key Identifier:
keyid:AA:75:E9:D7:C1:4B:82:90:B0:67:D8:3E:AB:F0:23:C9:B4:20:FB:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA75E9D7C14B8290B067D83EABF023C9B420FB66.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ns3EXXYzzxog9wCMMraFsSx2eCeMJr5VMbrGVnPyLoB/1/323830343a6261633a3a2f33322d3438203d3e20323632333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:bac::/32
Signature Algorithm: sha256WithRSAEncryption
cb:b3:90:1f:7c:a7:c3:ae:50:5e:01:7d:48:e0:b0:c3:9b:4d:
14:1f:36:a2:be:23:20:5d:58:19:75:db:48:a6:4f:04:35:5b:
cf:9e:9a:25:fd:b4:bd:78:c5:45:7d:f4:8d:32:23:dc:b7:85:
41:67:3f:77:82:d8:05:68:62:0e:3c:fb:79:72:de:37:74:67:
5b:59:db:0d:a7:af:98:0f:89:c2:ab:8d:60:53:73:c7:f1:35:
50:52:d8:93:e3:2f:19:11:cb:6b:84:b3:c3:bf:ad:df:fb:0b:
a2:03:65:a3:a2:49:97:76:d3:61:88:67:b2:42:79:72:4e:63:
3e:5d:02:44:8d:ec:80:c2:31:c1:ac:f2:ef:43:e7:73:87:03:
a3:34:33:bf:0f:a8:ee:bf:be:c9:5a:be:24:e6:cf:c3:a0:8d:
72:be:22:51:56:25:20:90:d0:9a:5c:2f:19:59:c9:62:f6:19:
7a:df:71:bb:05:fb:e7:da:7e:e6:f4:d1:88:9c:f1:a9:a0:52:
46:54:fc:2b:db:e1:34:fe:d0:21:5b:41:af:2f:7a:06:00:2e:
34:26:d5:9f:f9:2d:c1:56:58:9a:c3:32:24:c2:a3:9e:76:dd:
a8:03:da:a0:26:ca:37:d8:ae:32:7d:c1:03:42:53:f0:55:cc:
5b:0e:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:12 2025 by rpki-client